Cybercriminals have developed a sophisticated attack method using QR codes embedded in malicious npm packages to steal user credentials. The 'fezbox' package, discovered by Socket Threat Research Team, hides malicious code within QR codes that bypass traditional security measures. The atta...
Critical SonicWall firewall vulnerability (CVE-2024-53704) faces active exploitation after PoC code release, allowing attackers to bypass authentication and hijack VPN sessions. With 4,500 exposed servers at risk, SonicWall urges immediate firmware updates and security measures to prevent ...
A Chinese cyber group traditionally known for espionage has expanded into ransomware operations, as revealed in a November 2024 attack using RA World ransomware. The group, linked to Mustang Panda, targeted multiple organizations throughout 2024-2025 using PlugX malware and DLL side-loadin...
A critical zero-day vulnerability in Zyxel CPE devices enables unauthorized command execution, with over 1,500 devices exposed online. Simultaneously, a separate campaign targets SimpleHelp remote desktop software through multiple CVEs, attempting unauthorized access and domain information...
Multiple security vulnerabilities dubbed "PANdora's Box" have been discovered in Palo Alto Networks firewall models PA-3260, PA-1410, and PA-415. The flaws include BootHole, InsydeH2O UEFI firmware issues, LogoFAIL, and PixieFail vulnerabilities, potentially enabling firmware compromise an...
